tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

A flaw was found in Apache Tomcat. In certain conditions and configurations, this vulnerability allows a remote attacker to exploit a path equivalence flaw to view file system contents and add malicious content via a write-enabled Default Servlet in Apache Tomcat. For the vulnerability to be...

CVE-2024-21960: Incorrect Default Permissions

Incorrect default permissions in the AMD Optimizing CPU Libraries AOCL installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

AMD Optimizing CPU Libraries security vulnerabilities

AMD Optimizing CPU Libraries is a suite of mathematical function libraries from UltraMicroelectronics AMD. A security vulnerability exists in AMD Optimizing CPU Libraries that originates from DLL hijacking and could lead to elevation of privilege and arbitrary code execution...

PT-2025-20931 · Amd · Aocl

Name of the Vulnerable Software and Affected Versions: AMD Optimizing CPU Libraries AOCL affected versions not specified Description: The issue is related to incorrect default permissions in the AOCL installation directory, which could allow an attacker to achieve privilege escalation, potentiall...

AMD Optimizing CPU Libraries security vulnerabilities

AMD Optimizing CPU Libraries is a suite of mathematical function libraries from UltraMicroelectronics AMD. A security vulnerability exists in AMD Optimizing CPU Libraries, which stems from improperly setting the default permissions of the installation directory, which could lead to elevation of...

CVE-2024-36339: Incorrect Default Permissions

A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2025-20933 · Amd · Amd Optimizing Cpu Libraries

Name of the Vulnerable Software and Affected Versions: AMD Optimizing CPU Libraries affected versions not specified Description: A DLL hijacking issue in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2025-4455

A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library...

CVE-2025-4455

CVE-2025-4455 affects Patch My PC Home Updater (versions up to 5.1.3.0). The issue is an uncontrolled search path (DLL search path manipulation) impacting multiple system DLLs (advapi32.dll, BCrypt.dll, comctl32.dll, crypt32.dll, dwmapi.dll, gdi32.dll, gdiplus.dll, imm32.dll, iphlpapi.dll, kernel...

PT-2025-20458 · Microsoft +2 · Comctl32.Dll +21

Name of the Vulnerable Software and Affected Versions: Patch My PC Home Updater versions up to 5.1.3.0 Description: A critical issue affects some unknown processing in various system libraries, including advapi32.dll, BCrypt.dll, comctl32.dll, crypt32.dll, dwmapi.dll, gdi32.dll, gdiplus.dll,...

CVE-2025-1253

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0...

CVE-2025-1252

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3., from...

CVE-2025-1253 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0...

CVE-2025-1253

CVE-2025-1253 concerns RTI Connext Professional (Core Libraries). The issue is a Buffer Copy without Checking Size of Input, a classic buffer overflow in which input handling can overflow variables and tags. Affected versions include RTI Connext Professional: 4.5 through 6.1.2.22; 7.0.0 through 7...

CVE-2025-1253 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0...

CVE-2025-1252 Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3., from...

CVE-2025-1252

RTI Connext Professional (Core Libraries) has a heap-based buffer overflow vulnerability (CVE-2025-1252). Affected versions include RTI Connext Professional 4.4–6.1.2.23; 7.0.0–7.3.0.7; and 7.4.0–7.5.0. Root cause: heap-based overflow of variables and tags. Remediation per PT-2025-20366 is to upg...

PT-2025-20366

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 4.4 through 6.1.2.23 RTI Connext Professional versions 7.0.0 through 7.3.0.7 RTI Connext Professional versions 7.4.0 through 7.5.0 Description The issue is a heap-based buffer overflow vulnerability in RTI...

CVE-2025-1253: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Stack-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0...

PT-2025-20367

Name of the Vulnerable Software and Affected Versions RTI Connext Professional Core Libraries versions 4.5 through 6.1.2.22 RTI Connext Professional Core Libraries versions 7.0.0 through 7.3.0.6 RTI Connext Professional Core Libraries versions 7.4.0 through 7.4.x Description The issue is a Buffer...